NRL-1595 Workflow didn't have permission to pull CA certs for dev-sandbox env. Retrying with just server certs instead.

Author: anjalitrace2-nhs

.github/workflows/deploy-account-wide-infra.yml

@@ -62,7 +62,7 @@ jobs:
         env:
           ACCOUNT_NAME: ${{ vars.ACCOUNT_NAME }}
         run: |
-          make truststore-pull-all-for-account ACCOUNT=${ACCOUNT_NAME}
+          make truststore-pull-server-for-account ACCOUNT=${ACCOUNT_NAME}
 
       - name: Terraform Init
         env:
@@ -124,7 +124,7 @@ jobs:
         env:
           ACCOUNT_NAME: ${{ vars.ACCOUNT_NAME }}
         run: |
-          make truststore-pull-all-for-account ACCOUNT=${ACCOUNT_NAME}
+          make truststore-pull-server-for-account ACCOUNT=${ACCOUNT_NAME}
 
       - name: Terraform Init
         env:

Makefile

@@ -202,8 +202,8 @@ truststore-build-ca: check-warn ## Build a CA (Certificate Authority)
 truststore-build-cert: check-warn ## Build a certificate
 	@./scripts/truststore.sh build-cert "$(CA_NAME)" "$(CERT_NAME)" "$(CERT_SUBJECT)"
 
-truststore-pull-all-for-account: check-warn ## Pull all certificates for each environment in a given account
-	@./scripts/truststore.sh pull-all-for-account "$(ACCOUNT)"
+truststore-pull-server-for-account: check-warn ## Pull all certificates for each environment in a given account
+	@./scripts/truststore.sh pull-server-for-account "$(ACCOUNT)"
 
 truststore-pull-all: check-warn ## Pull all certificates
 	@./scripts/truststore.sh pull-all "$(ENV)"

scripts/truststore.sh

@@ -312,7 +312,7 @@ function _truststore_pull_all() {
     return 0
 }
 
-function _truststore_pull_all_for_account() {
+function _truststore_pull_server_for_account() {
     account=$1
 
     # sets envs_array
@@ -322,8 +322,6 @@ function _truststore_pull_all_for_account() {
 
     for env in ${envs_array[@]}; do
         echo "⏳ Pulling ${env} truststore certs"
-        _truststore_pull_ca $env
-        _truststore_pull_client $env
         _truststore_pull_server $env
     done